Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          fs3+2sfkP3uzDSahszpRgoB2L0EpUCad1cOGqw1ws+4=
Subject key identifier:   74:BF:9B:8E:8A:B3:2D:39:02:DC:C5:4C:1D:AE:F5:E1:AD:E1:C9:11
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       0194BB29585B6EE9F7B13EC53E3EC4C948E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          1168
Signing time:             Fri 31 Jan 2025 07:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:36 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: rwb/jRZ6Dy4aDP6ZIY01P6y2jpgnmAgQr+ROmL4IcoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:58:5b:6e:e9:f7:b1:3e:c5:3e:3e:c4:c9:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Jan 31 07:00:36 2025 GMT
            Not After : Feb  1 07:00:36 2025 GMT
        Subject: CN=74bf9b8e8ab32d3902dcc54c1daef5e1ade1c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:36:0c:ba:48:8f:89:31:d1:4b:35:53:c2:
                    2b:45:5d:65:f0:9e:5e:01:5d:54:c8:54:88:de:37:
                    da:dc:e1:d4:14:33:7e:fd:02:00:51:a6:8a:45:54:
                    75:f6:fd:ee:5e:d9:5e:d0:33:3e:96:ce:e0:e7:4b:
                    b0:ce:0c:32:65:f1:98:57:80:35:2b:c0:3b:80:d3:
                    ff:3f:f4:b2:11:3b:c1:65:a3:00:1a:14:4a:8a:03:
                    4b:0d:3f:e7:a3:76:67:8b:db:b0:8e:f7:ed:1c:91:
                    d6:15:e1:ef:cc:ed:f9:64:a2:76:11:6e:b6:30:a0:
                    40:3a:40:18:99:9c:da:40:f0:84:7a:cf:38:e8:c0:
                    b3:78:f1:f2:fa:45:4b:4d:cc:5d:56:9e:bc:05:c0:
                    c8:3a:37:5c:5c:f5:c8:52:cb:fa:70:ab:88:d8:e8:
                    79:b0:30:14:f7:70:2f:46:0f:be:ab:ee:7e:f1:8f:
                    1d:49:5c:2b:56:c5:54:c9:87:24:33:04:2e:8d:9d:
                    07:21:63:60:e6:ee:16:3b:40:e8:44:a9:52:a5:06:
                    e3:42:e7:45:cb:e9:7b:4d:e8:95:36:7d:de:be:fa:
                    91:c9:43:ac:82:20:80:3a:33:86:71:c1:8a:38:ec:
                    60:ee:47:c7:9a:d8:52:91:e0:d6:dd:ae:50:34:aa:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:9B:8E:8A:B3:2D:39:02:DC:C5:4C:1D:AE:F5:E1:AD:E1:C9:11
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:af:23:6d:41:91:c0:4c:43:c9:24:8d:9e:21:4a:d1:ed:
         ef:1e:51:13:4c:08:a3:de:cd:2d:ec:8e:f5:31:17:a8:82:06:
         0c:65:37:ff:0c:39:88:45:41:f6:69:8c:cf:df:9b:c5:87:48:
         fa:70:e7:ed:ef:02:3e:cb:e1:d8:8e:b2:5f:07:8b:be:3b:f3:
         42:0d:c4:7b:15:3c:2f:cf:49:ec:de:fb:ce:ba:11:29:3f:dc:
         9f:b2:94:9b:6a:11:70:65:a4:38:74:69:fb:2d:29:7f:e6:42:
         d6:6c:4b:de:12:2c:0f:ce:94:a8:38:2c:f4:dd:75:c7:4d:46:
         b8:a0:86:74:26:f4:ce:56:0e:f7:2a:12:5e:c8:83:45:69:2c:
         66:63:4f:0f:2d:a9:c5:47:c5:22:ae:45:ab:6b:4e:4d:e4:e1:
         d4:e6:4d:f1:c5:49:ce:4c:9e:bb:c4:35:c4:0b:a8:de:26:0b:
         d6:07:21:78:3f:89:65:7b:3f:41:e7:9c:05:7d:f2:2f:da:bb:
         e3:3a:9e:1d:9a:84:1b:ae:75:4b:56:7f:23:29:0e:a1:62:25:
         bb:8c:02:4e:b3:e3:44:63:a0:4d:90:05:dc:1f:54:bc:4e:db:
         5e:45:f1:89:a8:69:48:d3:ba:01:a6:b6:e5:bd:dc:8e:0c:5d:
         3e:40:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:02 2025 by rpki-client on console-fra.rpki-client.org